Legal and Privacy security
When using OVHcloud services, we offer the option of hosting your personal data exclusively within the European Union, allowing you to benefit from protection against the application of extraterritorial laws from third countries.
However, our customers can also choose to process personal data on OVHcloud infrastructure located outside the EU or EEA, such as in India, Australia or Singapore.
OVHcloud ensures that its IT systems, legal entities, and internal policies comply with the laws of each country where these customers’ data is hosted.
In addition to this commitment, OVHcloud has concluded Model Contractual Clauses (CLCs) with each of its subsidiaries to guarantee its customers that personal data processing outside the EU and EEA is covered by technical and operational measures offering protection equivalent to that of the GDPR.
However, OVHcloud points out to its customers that, before transferring any personal data outside the EU or the EEA, it is their responsibility to carry out the legal analyzes necessary to ensure that the data is legal.
Below is a non-exhaustive list of the main applicable texts relating to the protection of personal data in non-EU countries where OVHcloud has data hosting infrastructure.
Legal and Privacy security
European Union
Legal Text |
Australia
Legal Text |
Canada
Legal Text |
(Ontario MFIPPA) |
India
Legal Text |
Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “Rules”) |
Direction No. 20(3)/2022-CERT-In ('the Direction'), pursuant to Section 70B of the Information Technology Act, 2000, in which it addressed information security practices and procedures for reporting cyber incidents |
Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rule, 2013 |
Morocco
United Kingdom
Legal Text |
Senegal
Legal Text | URL |
Law No 2008-12 of 25 January 2008 Concerning Personal Data Protection ('the Law') | |
Decree No 2008-721 of 30 June 2008 Concerning Law Enforcement, Relating to Application of the Data Protection Law |
Singapore
Legal Text |
Tunisia
Legal Text |